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(54) Titie: SOFTWARE DISTRIBUTION SYSTEM 



(57) Abstract 

A system for distributing copies of computer sof- 
tware provides inherent protection against unauthorized 
copy of the software. The software distribution system 
includes three computers: a host (10), a software protec- 
tion computer (12) and an end-user computer (14). The 
host computer (10) is under the control of the vendor, 
and the software protection computer (12) and the end- 
user computer (14) are located at the customer installa- 
tion. The software is encrypted in the host computer (10) 
and then transferred to and stored in the end-user com- 
puter (14) after it is registered in the software protection 
computer (12). The transferred software is encrypted us- 
ing a unique encryption key. Each copy of a software 
package generated by the host computer (10) is a unique 
encrypted version of that software package. When this 
unique encrypted version of the'software package is run 
on the end user's computer (14) and encounters an en- 
crypted portion of itself, it will suspend normal execu- 
tion and transfer the encrypted portion to the software 
protection computer (12). This computer (12) will then 
decrypt the encrypted portions of the code and return 
the decrypted portion of the code to the end-user com- 
puter (14) where that code is itself executed or allows ex- 
ecution of the program of which it is a part to continue. 
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SOFTWARE DISTRIBUTION SYSTEM 

BACKGROUND OF THE INVENTION 

This invention relates to electronic software 
distribution and nore particularly to a software distribution 
system in which the distributed software is protected against 
copying. 

Over the past few years , the- growth of the software 
industry has been enormous, and as nore and more people purchase 
personal computers, the industry is expected to continue to grow 
rapidly. For the most part, purchased software changes hands 
from a mail order or retail vendor to a customer in sane physical 
form such as a tape, disk or even a printed listing of code. 
Such physical distribution has resulted in a number of problems 
with respect to both the mode of distribution and customer 
servicing as well as with the rights of the creators and 
publishers of the software which is sold. • Principal among the 
problems is that a large percentage of the software which is sold 
ends up being illegally copied. Frequently, a purchaser of 
software will "lend" his copy of the software to a friend who 
makes a copy for himself. The most obvious result of this 
unauthorized copying is that the profits of the creator and 
publisher of the software (who probably have a copyright in the 
software) are greatly reduced. To make up for these lost 
profits, the price of the software is maintained at a high level. 
This sustained high price unfortunately produces an even greater 
incentive to illegally copy. 

Copyright protection, which does provide the creator 
and publisher of software with legal recourse against the person 
making the unauthorized copies has, in fact, afforded little or 
no relief frcm the problem of copied software. As the copies are 
often made by individuals for their own use, large-scale policing 
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of such copying is virtually impossible. On rare occasions, a 
copier having a large copy resale operation can be caught, but fcy 
the time he is caught, many unprotected copies usually already 
have been distributed. Furthermore, the advent of software 
rental shops has further limited the copyright owner's ability to 
protect his rights in the software he cwns. 

Another problem frequently encountered with software 
sold over the counter is the need to later distribute revised 
copies to add new features or to fix errors or "bugs" present in 
the software. These bugs appear despite rather substantial 
testing that is performed before a software package is put on the 
market. These bugs are particularly prevalent in software which 
has recently enteced the market. In order to correct any errors 
which do appear in the software, a software publisher must recall 
the disk or tape which contains the faulty software. The problem 
with correcting errors in this manner is that the software is cut 
of the hands of the purchaser for a number of days, if not weeks, 
while the exchange and correction take place. Finally, the 
cumbersome nature of this system discourages the user's updating 
of his software which often leaves a bad impression of the 
software publisher's products in the field. 

In order to combat the illegal copying of software, the 
software industry has taken a number of precautions. The various 
approaches fall under three categories: media protection against 
copying, use of read-only media and processor serialization. 

Media protection against copying . refers to making some 
unique version of the medium containing the software. One type 
of media protection involves the use of variable-pattern 
diskettes. Variable-pattern diskettes, however, do not offer a 
practical solution to the software copying problem since these 
diskettes depend on a soft format diskette drive and they are 
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vulnerable to memory copy if the entire program is loaded at 
once. Furthermore, such variable-pattern diskettes can only be 
used in a small percentage of the drives currently on the market. 
Therefore, the software distributed on such diskettes can only 
be offered to a rather snail percentage of the market. Finally, 
physical alteration of the media, usually by forcing hard errors 
on the media checked for by the software itself, has been used. 
This method fails in that hardware checks in the software can be 
located and neutralized in the software itself. 

Another type of media protection against copying 
involves the use of an operating system override. Such a 
protection scheme depends on a rather unique operating system 
which prevents copying of diskettes. The use of an operating 
system override, however, has not proven to be the answer to the 
problem either since the altered operating system must be 
tailored to the particular controller chip of the computer on 
which it is operating, and the operating system override cannot 
support use with standard operating systems currently on the 
market. In addition, any operating system override is vulnerable 
to an algorithmic solution or "cracking". One variation on the 
operating system override scheme has the. software employ features 
of the hardware, circumventing the operating system, to check 
areas on the storage media which the operating system cannot 
reach. This method can also be defeated by being neutralized in 
the software itself. 

A third type of media protection against copying 
involves the use of segmented programs in conjunction with 
variable-pattern diskettes and/or an operating system override. 
The use of such segmented programs of necessity requires seme 
type of a segment loader to read in the various segments when 
required. This results in very slow response frcm a computer 
utilizing such segmented programs. Furthermore, any loader 
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routine for reading in segmented programs is vulnerable to 
algorithmic solution. In addition to the problems stated above, 
these media protection devices have generally been perceived as 
being user-unfriendly, and since it is not possible to make a 
legitimate backup copy, such protection schemes are not in wide 
use. 

Another possible solution to the problem of software 
copying involves the use of read-only media to store the 
software. Among the read-only type media which may be used are 
ROMs and laser cards. The problem with the use of such read-only 
media is that any software update can only be done by replacing 
the media itself, and therefore any software update becomes 
rather expensive. Moreover, there is no legitimate backup for 
any media failure since a backup copy cannot be created. 
Finally, with the use of read-only media, added expenses are 
incurred by the user, since a particular type of reader for that 
media must be purchased at great expense to the user (with the 
exception of ROMS) with that user gaining no significant- 
additional value. 

The third type of protection, processor serialization, 
has also not proven to be a very effective means of protecting 
.software. The reason for the ineffectiveness of this mode of 
protection is. that processor serialization requires either the 
compliance of all ccnputer manufacturers or publisher-supplied 
hardware which canes with the software package to provide the 
serialization. In addition, this protection technique adds no 
value to the canputer to compensate for the cost, and there is no 
benefit to the manufacturer for complying with a processor 
serialization scheme. Finally, since serialization involves a 
passive device, it is easy to defeat the serial number check in 
the software itself. 
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In light of the problems enpcjmtered with the 
above-described currently existing protection schemes , it appears 
that illegal sales or copying cannot fcie^stopped altogether; it 
can only be made more diff icult. The ultimate goal of any 
protection scheme therefore is to make the cost of cracking the 
protection scheme comparable to or preferably greater than the . 
cost of purchasing the software. In order to make cracking costs 
greater than the purchase price of the software, the protection 
scheme nust not employ an algorithmic approach which can be 
easily solved. In addition, any add-on hardware must be of a lew 
cost nature, and must be compatible with the machines of a 
majority of the major cenputer manufacturers. 

Therefore, it is a principal object of the present 
invention to provide a software distribution system which can 
.protect software frcm being copied. 

Another object of the present invention is to provide a 
software distribution system in which software is encrypted using 
a virtually indecipherable encryption key. 

Still another object of the present invention is to 
provide a software distribution system in which each copy of the 
distributed software is protected by a unique encryption key. 

Yet another object of the present invention is to 
provide a software distribution system in which each copy of a 
program is organized in a unique pattern to frustate comparison. 

A further object of the present invention is to create 
a software distribution system in which revisions in software can 
be easily distributed. 



SUMMARY OF THE INVENTION 

These and other objects of the invention are achieved 
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by an electronic software distribution systati in which 
distributed program copies are uniquely associated with specific 
hardware to which the end user's computer rtiist>6e connected. A 
central computer facility operated, for example/ by a software 
vendor, contains storage capacity for a library of available 
programs* Auxiliary Software Protection Processors" (SPP) are 
issued to the users. Each SPP is electrically connected to the 
user's computer and electronically interconnected with the 
central facility, for example, via a modem-interfaced phone lit*. 
Each SPP is equipped with a unique number code referred to as the 
package encryption key (PER) which is recorded at the central 
facility. The PEK can be factory loaded or down-loaded (via the 
communications link) to the SPP frcm the central facility. The 
software distribution system of the present invention embodies 
two distinct unique operations v (1) software preparation and 
delivery and (2) software execution in the user f s computer. 

? In the preparation/delivery phase, whan a user orders 

software frcm the central facility, the facility first looks up 
the PEK for that user's SPP and selects an available registration 
index number (RIM) which will be unique for that user's copy of 
the software package. The central facility then prepares the 
unique user copy of the ocdered program by encrypting passages of 
the program selected by the central facility in a manner such 
that a given algorithm operating on a key specified by a 
combination of the PEK and RIN and an encrypted passsage will 
yield the original unencrypted version ("plaintext") of such 
passage. The encrypted version of the ordered program (which is 
encrypted only in a subset of its parts or modules) is then 
transmitted to the user along with a control block containing the 
RIN. The control block is stripped off and the RIN stored in the 
user's SPP while the transmitted program copy (with its encrypted 
passages) is stored in the user's computer system on 
user-selected media. 
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In the software execution 'Et^ o£iq^^\:ia^ i \i^ the 
user desires to run the program, the initial instructions in the 
program check the specific RIN in th££PP/assoc&^ 
program copy. If the RIN is okay, normal execution proceeds 
until an encrypted passage is encountered. The user's computer 
then executes a call to the SPP in which the encrypted passage is 
fi. .;.„, de^ypted algorithmically in the SPP by use of the key "specified 
rfay- s the PEK and RIN. The decrypted passage is returned to the 
user's computer. If the passage is properly decrypted, normal 
program execution resumes until another encrypted passage is 
encountered. In the preferred embodiment, these passages may 
actually be software instructions as well as data. 

Time-limited authorization is implemented by means of a 
real-time clock or counter embedded in the SPP which, for 
example, erases or alters the software-specific RIN after a trial 
W^- ^ : ^lifot" -or rental term. Since the unique user copy, of the 



^^pliitid software cannot run properly unless an SPP with the 
^i^^^^t : PEK and RIN is engaged with the user's computer system, 
the software package would therefore be disabled. 

These and other features and objects of the present 
invention will be more fully understood from the following 
detailed description which should be read in light of the 
accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a system block diagram showing the various 
components involved in the transmission of information in the 
system of the present invention. 

* 

Fig. 2 is a block diagram shewing the communication 
interaction of the various components of the system at the user's 
location. 
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Fig. 3 -is >-cirpuit diagram 
processor of Fig.;2*#>:^; . \ ^ 

DETAILED DESCRIPTION OP THE PREFERRED EMBODIMENT 

The. software distribution system of the present 
invention! provides a means for a vendor to sell software to a 

|^%Jpiile providing protection against <^ing that 'software. 
shSm' in Fig. 1, the software distrilxitd^ysystem of the 
present invention includes three computers - a host computer 
called the Software Encryption Ooraputer (SEC) 10, a software 
protection computer designated the Software Protection Processor" 
(SPP) 12 and the End-User Computer (EOC) 14. Of these ccnputers, 
the SEC 10 is owned and operated by the vendor while the SPP 12 
and the EOC 14 are owned by the customer and located at a 
custcraer installation.- The software which is purdtosed the 
customer is transmitted frcra the SEC through a ccnraunication 
system such as phone lines, a local area network or a cable 
systems In the preferred embodiment, the software is received by 
the SPP 12 which transfers the software to the EOC 14 for 
storage. When the software is transmitted over phone lines, a 
modem 16 at the vendor installation and a modem 18 at the 

. custcraer installation are required for sending, and receiving the 
software. 



The word "encrypt" is used in this application to 
indicate a process of taking original code and disguising it so 
that it is unintelligible. On the other hand, the word "decrypt" 
is used in this application to describe the reverse process, 
namely transforming disguised, unintelligible code back to its 
original form or "plaintext" in the vernacular of cryptography. 



The SEC 10 is a central computer facility located at a 
vendor site or operated under the control of the vendor. The SEC 
10 maintains a library of software available for distribution. 



in the EUC JlP^Although the SPP 12 has been described^ 
comunicating with the SEC 10 through a modem 18, the SPP 12 may 
also contain or interface with ccrrmunication devices such as a 
local area network or a cable system. The SPP 12 may also be 
contained within the user's EUC 14 as well. 

The third computer in the preferred embodiment of the 
present invention, the EUC 14, is a customer cwned or operated 
ccnputer. This computer may be a hone computer, personal 
ccnputer, snail business computer or a large main frame ccnputer. 
All software purchased by a customer is designed for operation on 
his particular EUC 14. 

In operation, before any software may be sold, the 
customer must purchase a modem/SPP unit and its associated 
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cannunlcation software in order to make use of the software 
distribution system of the present invention. Each SPP 12 has 
its own unique Package Encryption Key (PEK). The purchased 
roodon/SPP unit is then connected to the customer's EUC 14, and it 
is siirply left in place until the customer -wants to purchase 
software. In the preferred embodiment of the system of the 
present invention, the customer wishing to purchase software 
connects his nodertv/SPP with the system's SEC 10 via telephone. 
The raodem/SPP 12 passes its unique identification code 
(prefereably in encrypted form) to the SEC 10 to confirm the 
identification and the legitimate status of the customer. The 
SEC 10 then generates lists of available software packages along 
with prices and terms of sale. These prices and terns of sale 
(usually credit card authorization) must be agreed upon before a 
transaction actually occurs. Once the customer has met the terras 
of the sale, the SEC 10 creates a unique copy of the specified 
software package, and this package, which also contains encrypted 
security control information, is transmitted through the 
customer's moden/SPP into his EUC 14. The preparation of the 
unique copy is accomplished by encrypting selected passages of 
the software. First, the SEC looks up the unique PEK for the 
user's SPP. Next, the SEC selects an available Registration 
Index Number (RIN) specific to the usee's software copy. 
Passages are encrypted in a manner such that they can be 
decrypted by the SPP using its PEK modified by the 
package-specific RIN. 

When the EUC 14 begins to receive a unique copy of a 
specific software package, the EUC 14 sends the control 
information block which arrives first to the SPP 12 for 
registration. Included in this control information is the 
encrypted Registration Index Number (RIN) which is decrypted by 
the SPP 12 and stored in its memory. After the control 
information has been decrypted by the SPP 12, the remainder of 
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teedVsoftware package itself, is 
the customer's EUC 14 for storage ctf 
the customer runs software 
Is SP P 12 must also be connected 



the transmission, the^ 
passed through the SPP; 
user-selected media, 
purchased from the SEC 

that SPP 12 must be theSie SPP 12 which was used when 
purchasing the softwareMnitially. If either of these cxx^itiona||^ ; g^ 
it, then the- s^Mis will not operate on the EUC 14 /--Sm^^ ' 





PEK and tl^f^l ' for decrypting any particular 



4m 



'package, are <qc^toce6'ttt the SPP 12 which was used ;£o||g|| 



"Sdftwa 




operation are summarized in the 



ttion and Delivery Phase 



1. User withfri , 



SPP calls SEC. 



2, SEC verifies SPP identification number. 




3. User selects software from menu. 



4. SEC looks up PEK for user's SPP. 



5. SEC selects available RIN for user selected 
software. 

6, SEC encrypts selected passages of software 

in a manner such that they can be decrypted by 
SPP by algorithmically combining encrypted 
passage with. key generated by modifying PEK 
with RIN. 



i r. 
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7. SEC transmits control block with encrypted version 
of RIN, followed by software with encrypted 



passages* 



8. EUC passes control block to SPP. 



9. SPP decrypts and stores RIN in its memory* 

10. EUC stores software with encrypted pass ag es 
on disk or other media* 



2. Initial module of software tests decryption 
by sending data to SPP. 

3. SPP lodes up corresponding RIN and decrypts data 
with key formed by modifying PEK with that RIN. 

4. Software tests returned data and halts execution 
if data are incorrect. 

5. Normal program execution until encrypted 
passage encountered. 

6. At encrypted passage, software jumps to a 
decryption module which transfers data or 
instructions to SPP and gets decrypted data 
or instructions in return. 

7. Resume normal execution until next encrypted 
passage. 



TABLE II 



Software Executi&n Phase 



1. 



EUC loads program off disk oar other media. 
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The software Protection Processor" (SPP) 12 is the 
heart of the software distribution system of the present 
invention since it is the SPP 12 which provides intelligible code 
to the EUC 14. As shown in Pigs. 2 and 3, non-volatile 
read/write memory 22 is provided in the SPP 12 for storing a 
valid software list. This non-volatile read/write memory may be 
implemented in an electrically erasable programmable read only 
• ^'memory (EEPROM) so that the list can be updated with each 

purchase. The EEPROM 22 will also include a publicly accessible 
serial number and the PEK. In the preferred embodiment, a 
clock/timer 24 is also included in the SPP 12 to implement 
time-limited authorization so that software can be used on a 
trial or approval basis or rented foe a certain predetermined 
allotted time. The clock/timer 24 is provided with a battery 
backup. By using such a clock/timer 24 the current time will be 
updated with every connection to the SEC 10. If there is no 
battery backup and power to the dock/timer 24 is lost, it is 
> necessary to reconnect to the SEC 10 before any rented software 
•f I can be run. In addition to the non-volatile read/write memory 
mentioned above, the SPP 12 will also include a non-volatile 
read-only memory (ROM) 26 for storing the SPP's operating 
program. An illustrative operating program in 2-80 assembly 
language is given in Microfiche Appendix Part I. If it is 
desired to provide for later update of the SPP's operating 
program, however, then an EEPROM can be substituted for the ROM 
26 which contains the operating program. 

The SPP 12 also includes a Z-80 microprocessor 28 which 
controls the functioning of the SPP 12. This raicroprccessor 28 
will conmunicate with both the SEC 10 through modem 16 and with 
the EUC 14. Appropriate communication interfaces 30, 32 (Pig. 2) 
are provided between the microprocessor 28 and modem 18 and 
between the microprocessor 28 and the EUC 14, respectively. 
These ccnminication interfaces include a dual asynchronous 
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receiver transmitter (DART) 34. The EARP 34 cxitinuriicates with 
the EUC 14 and the SEC 10 through lines 36 connected between the 
EOC 14 and the SPP 12 and through lines 38 connected between the 
SEC 10 and the SPP 12. The DART 34 is linked to the 
microprocessor 28. Input/output addresses are decoded by. circuit 
40. A baud rate generator 41 is also included for appropriately 
matching the modems 16 (Fig. 1) and 18. 

The microprocessor 28 preferably includes its cwn 
working randan access memory (RAM) and it has the ability to 
execute a program out of either EEPFOM. RAM 42 is provided as 
working storage for microprocessor 28. This RAM 42, as well as 
EEPRQMS 22, 26 are linked to the microprocessor 28. Memory 
addresses are decoded by circuit 44. 

Clock circuts 46, 48 drive microprocessor 28 as well as 
the baud rate generator 41. A lOmSec delay circuit 50 is also 
connected to the microprocessor 28 which introduces a delay 
whenever a write operation is directed to EEPR0M 22. 

In the preferred embodiment, the modem 18 is included 
in a "black box", with the SPP. This modem 18 takes data from the 
microprocessor 28 and transmits it over phone lines, and the 
modem 18 receives data transmitted over the phone line and passes 
it on to the microprocessor 28. While all of the above elements 
of the SPP 12 have been described as individual components, most r 
if not all, of these functions may be implemented on a single 
chip or small number of single chip microcomputers. 

Another aspect of the present invention which requires 
special consideration is the Package Encryption Key (PEK) which, 
is created for each customer and his SPP by the SEC 10. This key 
will be rather large, preferably on the order of 256 bits. Sane 
or all of the bits of the PEK will be used to perform one or more 
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. . ^ ^operations on a section of the code "having a corresponding number 
of bits. 

For example, if a key of 256 bits is used, the SBC 10 
g^;,^ will select portions of the program to be encrypted which also 
^^y?/have. 256 bits. An operation, such as exclusive ORing (EOR) the 
IS&twp 256 bit code*, is then performed and the resulting 256 bits 
**^ : ljB inserted into the program at the position from which the 

selected 256 bits were removed. It is this encrypted version of 
the software package which is sent to a customer. In order to 
decrypt this code, the SPP 12 will perform a reverse operation 
using the 256 bit key and the encrypted 256 bits. In the case 
where the original operation was an EOR, the reverse operation is 
also an EOR. The specific key which is assigned to each customer 
■> will be stored in the SEC 10 and this key will be used by the SEC 
10 when creating each encrypted version of software. 

^^^ftfb' , The valid software list which is maintained by the SPP 

'iSll^Siin EEPflOM' 22 includes an RIN for each entry into the valid 
software table. This RIN points to a location in the PEK. for 
example, if a one byte RIN ( 0-255 > in the valid software table 
for a specific software package is 108, then the program's 
encryption will be performed using a key which begins at the 
108th bit of the customer's PEK. In one embodiment, as each 
program is sent to the EUC 14, it will be given the next 
consecutive available RIN for the PEK. In other words, the first 
program in the valid program table will be given a one byte RIN 
of 1 into the PEK, the second program sent to the SPP's valid 
software list will be assigned an RIN of 2 for the PEK and so on. 
The assigned keys will remain the same size since the ends of the 
PEK are simply "wrapped around" so that the new end of the PEK is 
the bit immediately preceding the beginning bit of the PEK. 



To summarize, the actual encryption key is a function 
of the user-specific PEK and the software-specific RIN. The RIN, 
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| Besides encrypting software _ . 

re distribution system of the ptes^ iiwer|tiqn will 
tional safeguards against cop^ing^ 7 S 
programs are constructed from small* 
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^ tte program appears to be nbr*>IltJ^^ 
any attempt to copy sof tratp^^ 
distribution system of the present invention y^^k^inble 'thef| 
order of the modules cn a randan or other basis. In this way* 
any person gaining access to two copies of the same encrypted 
sof tware package sold by the SEC 10 will not be able to locate 
the sites of encryption by simple comparison. 



t .-f ■■■■ 



A concrete example of program encryption and module 
randcmizatiort is presented in Part II of the microfiche appendix. 
Five sample modules are incorporated in a program called "MAINl*. 
The program is designed to run cn a MSDOS system such as that 
used on the IBM PC. The unencrypted object code for the program 
is stated in hexadecimal digits cn pages 1-13 of Part II of the 
microfiche appendix. To prepare this software for delivery, a 
special "security control module" (pages 17-19) is added to 
handle all calls to the SPP. The security control module acts 
like a subroutine. Actually, this subroutine engages the 
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"subprogram" in the SPP to decrypt the encrypted passages. To 
illustrate an encrypted passage, special print data (a part of 
the software) is presented in connection with modules 1 and 4. 
As shown on page 16 of Part II, two sets of "external character* 
data are created namely "*messgl" and ."*messg4" in place of the 
plain text version This is. " nodule 1 or 4, respectively. (See 
page 16, Part II.) " Before encryption, the print data resides 
correctly in program memory beginning at hex location 2762 (page 
12, Part II). After encryption, the first eight bytes of the 
print data for modules 1 and 4 is encrypted as shown for nodule 1 
in locations 2762-2769 (page 31, Part II). The encryption was 
performed by exclusive ORing. The original eight bytes • 
(representing "This is " with the 64 bit (eight bytes) PEK 
"AAAAAAAAAAAAAAAA". In binary this nonrandcm PEX is "1010 ..." 
Thus the even/oddness of the RIN determines whether the 
decryption key starts with "0" or "1". The encrypted code on 
page 31 was produced using an even RIN of 1234 and the encrypted 
code for the scrambled module format was produced using an odd 
RIN of 4321. When using either encrypted program "MAIN1E" or 
MAIN2E", when running the user's copy, the security module is 
called upon reaching "*messgl" or "*messg2" and the encrypted 
bits are sent out to the SPP and exclusive OR'd with the key 
(i.e., either "101 ... " or "0101 ..." depending on the RIN in 
use), and returned to the user's computer in decrypted form as 
the equivalent of "This is ". Note that while a 
location-by-location comparison of "MAINl" (unencrypted) and 
"MAIN1E" could reveal the encrypted locations, this type of 
comparison is rendered more difficult by scrambling the order of 
the nodules as in "MAIN2E". In practice, it is intended that a 
longer randan number PEK will be used and executable instructions 
as well as program data will be encrypted in a similar manner. 

The foregoing system thus solves the problem of secure 
distribution of software to users by associating each unique copy 
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with specif I 
connected, 
when the SPP! 




user 1 3 carotii 

Wil^W^che^ 
in a phone lj^ffetwca*, the systOTpgtondes a pcwe: 
providing orv^^ service to users |||^texan^ei ^^ 



* to which 
the user's 

i&ght PEK 




-be notified;: 




provided with ^ft^^ enhancements 
thev are availabl|t ^Moreover; "the J 
imited authorizafiipn. At the end 



srm^f the RIN for #ie^^ so£trc 



bus otto(^ 
area netwc^cs. Modem ^ — : '~ 



iraent of the^invention, onlfc 




decrypt Ja 
password to* 
data/ for example. 



o J£nds 
ing a passwdrdi the SPP can 
at; host ComputerLand retcansrait ^ 
to verify authorization for acdfe 




use as a ^te 



Employing EEPROM's in the SPP opens up the possibility 
of downloading completely new software for cunning the SPP. Even 
new PEK's can be added by "remote control 11 frcra the SEC. Thus, 
the SEC maintains control over the cryptographic system in use by 
the SPP, For exarrple, in addition to the exclusive OR algorithm/ 
new algorithms with entirely different, perhaps more complex 
logic functions, could be added, including nonreversible keys. 



While the software distribution system of the present 
invention has been described with reference to its preferred 
embodiments, various modifications and alterations in both 
hardware and software will occur to those skilled in the art frcra 
the foregoing detailed description and the accompany ing drawings. 
These and other modifications and variations are intended to fall 
within the scope of the appended claims and equivalents thereto. 
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PART 1 



* i£of tn»t ZPP cod* 



• pop 
.pabs 
. tl Ink 



nAM tqu lOOOh 

HAH3Z «qu SOOh 
CCPROM oqu CQOh 



CTCO 
CTfit 
CTC2 
CTC3 

3IODA 

arncx 

310DB 
SIOCB 

r.IRDA 
C1RBO 

HODESC 
S3CCNT 
CROCMT 



• qu l&h 

• qu llh 
•qu llh 
•qu I3h 

•qu OOh 
•qu ath 
•qu 02h 
•qu 03h 

•qu RAM+400h 
•qu RAM+300h 

• qu 

• qu 3 
•qu XOOOO 



;clrcular buffer (or * to b direction 
;clrcular buffer for b to a direction 

;aodam mod* rseapi char 

; number of modem chars ne«d«d 

;guacd band count (about 1.5 seconds) 



orn HAM 
tpnta: .blkb 2 
opnta: .blkb 2 
lpntb: .bllrb- 2 
opntb: .blkb 2 

grdtmr: .blkb 2 
grdfl*: .blkb I 
count: .blkb 1 

curkey: .blkb 1 
erypbf: .blkb 0 

oeh SCPIIOM 
key: .blkb a 
sftlst: .blkb ?»B 

orq QOOOh 

start: 1x1 sp.RArURAM3Z 
call init 
1>1 htCIRBA 
shld Ipnta 
shld opnta 
1x1 h.CIROO 
shld lpntb 
shld opntb 

main: call gota 
mov c,a 
1st h,cmdtbl 
call dsptch 
jmp main 

dsptch: fflv i 

cmp m 
r i 

mov a«c 
cap m 
it dsptcl 
Ins h 
ins h 
ins h 

jnp dsptch 
dap tci : 1 nx h 

mov a t m 
Ins h 
mov h f m 



;innut circular buff*r pointer for a to b direction 
joutput circular buffar pointer for a to b direction 
{Input circular buffer pointer lor b to a direction 
;output circular buff*r pointer, for b to a direction 

; guard band timer ^ . 

;s«t to -1 If last char was guard band 
;numb«r of escape chars 



;key In current usi for now-, 
sbufter for encrypt operation * 



just ui« 1 byt* 



;0 byt« k«y 
;softwar« list 



0 entries of 7 by tss 



;set up etc and pio 
ilnlt circular buffer pointers 
i 



Zget char on channel a 
; to c 

•dispatch table 

;call appropriate routine 



;«nd of 
i ma tch 



table* Ignore 



;get address, and jump there 
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3& - 



jcmdtbl 



emdtbl 



mov 1*4 
pchl 

: 4b 0 

dw rat at *v 
db I 

dw anarypt 
db a 

dw gat tlma 

db 3 

dw aalfcay v 
db 4 

dw updata 

db 3 

dw sat tlma 

db * 

dw rdlist • 
db ? 
. dw ttodw 
db -I 

db ' 0 • 
dw ntit 
db I < 

dw ancrypt • 
db 

dw gat tlma 

db 

dw aalkay 
db M • 
dw update 
db 

dw settlmf 




ancrypt: 



•net 1 ; 



•ncc2 : 



W9 I C t 8 

1st h,crypbf 
Ida curkey 
mov b*a 

C4ll get* 

xra b 
mov m#a 

mi h 
der c ' 
jnx tncf 1 

mv 1 c . 0 
Ivi h«erypbf 
mo v 4 , m 
call put* 
tnx h 
dec e 
jnx encr2 
rat 



I return eta ttt» 

I return ancryp ted response* 

I I a t .a r#t I and data 
l»aiaftCkiy^:J% • : 
iopdal^toHwara list 
laal Una and; data 
{return software list 
j go to mo data mod a 

i 

; return status 

; return anccyptad response 

{return tlma and data 

;s*lect kay 

j update software Iiat 

2 sat tlma and data 

;jratacnr software list 

; go to ? mo dam mo da 



j t a tarn statue 

; raturn, status — *3* for now 



jriturn encrypted response 



;get C byte* to anerypt 
;encrypt it 




;send baclr encrypted byles 





selkey: ;select 
call gata 
mov b # a 
call g*ta 
mov 4»b 
ana 4 
3 ax selkl 
Ida k.y 
sta curkey 
rat 

selki cat! gtllat 
mov c # m 



kay 

,gat index into software list 

, tniJ most significant pact <don*t uaa 



it tor now) 



.indax of 0 maans us* d«tiult kay 

, r»turn pointar to *ntry in *oftware Hat 
; t nU«> into kay 
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nvi b*Q 
in h.kay 
dad b 
mo 4 i m 
it* curkiy 
rat 



;gat kay 



4 tlln: 



gtlstl : 

updata: 

upda ti : 
updatZ: 

wr tpra: 

wr Ipc I : 
wrtprS : 

rdilat : 
rdlatl: 



W« w.th into <on, » l '° Ug * l> U fM 

Iraturn pointar to soMwar* Hat 



1*1 h.sftlat 
dcr a 
r x 

ant 7 
Isi d,7 
dad d 
dcr & 

jns gtlatl 
r* t 

call flata 
call gtilat 
mvi c,7 
cat! gala 

call wctpra 

ins h 

der e 

jns updall 

rat 



;b. ginning of soltwara Jl«t 
.only B poaslbla 

;?in3 nigtnnlna'Se'ipproprlat.. antry 



iupdata soltwara 1 lyt 

;gat indajc into lljl 

tgat baglnnlng of that 

•Sow gaf 7 aoftwara Itst antrU* 

; f i 1 I in antry 

iwrita rag a to aaproat addraaa In hi 



swrlta rag * 

b 

,0Cfh 



to aaproa addrasa In hi 



push 
nv I . . . 
mvi e«0 
der c 
in* wrtpri 
mo v m«a 
der e 
in% wctprl 
p6p b 
rat 



mvi e»64 
lxi h,fcay 
mov aria 
eail puta 
ins h 
der e 

inx rdlsti 
rat 



I^S.flyU^nll: to^io-w^o.tabi. it. duty cyel 



;raturn sottWara list *?f t £! w ; 

,;0 byto kay ♦ sortwara 



raturn kay 
list •ntrias 



too 



;not yat impiamantad 
q« 1 1 I ma : 
s« t tina: 



;roturn tima and data 
;s*t tima and date 



r 



aod«n: 



aodam2 : 



mod ami : 



rat 



sub a 

sta grdflg 
sta count 

Itt h.GHDCNT 
shld grdtnr 

In S10CA 
ani 4 
cnx snda 
in 3I0C3 
ani 4 
ens sndb 
in 3I0CA 
ani 1 



;inlt guard band datact variable* 

;inlt guard band count 

;ehannal A status 
;raady to sand on a 

; raady to aand on b 
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snd*: 




Ihld opntb 
id* ipntb 
cap I 
c* 

mow *#m 
out 2IODA 
• tnt I 

^nlHvopntb 




:^^fe|d-i : on : - *" ; ; » -^M'^|f iff-.;*;* ' b ,npul MU ' 
•rt'wj'ijo ■ «h*c« e«*dyt V 



vfT;, 



-mi e 



-r* turns char in rn * 




rcvb : 



;r*c»iva char on jchannal a 
I hid ipnta 

in StODX r 
mo v m , * 

shld'lpnta ;updal* circular buffet potnt-c 

rat • 

;r«ciiva ehu on channel b 
Ihld ipntb 
In SIODQ 
mo v m , a 

shld'iputb jupdat* circular buftor point. r 

rot 



; channel X status 



put a: ;sond chac In rog a on channai a 

push paw 
putal: in SIOCX 

anl 4 

Jr putal 

pop psw 

out SIODA 

*t>t 
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a a ta: 



Init : 
; tnil 



in 3IOCA 
anl I 

iS flata 

in SIODA 
rat 
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;gat char trow channalf * 




;lnit CTC and StO 



CTC at * divlda toy U to 
5 Init channel 
mvl a,0l00010lb 
out CTCO 
mv I a • 1 A 
out CTCO 
avl »,Ql000l01b 
out CTC I 
mvl a , 1 6 
out CTCi 



ganarata -1200 baud • , 

i t lma j constant 

; eountir mod. v load tliaa constant naat, no Int 
; tima constant 



SIO channals 
mvi a, I Oh . ■ 
out CI OCA 
mvi a* 4_ ' 
out 5I0CV 
mvl *,01000l00b 
out StOCA 
nvt i»3 
out 3 I OCA 
mvl 4,11000001b 
out 3 1 OCA 
mv 1 4,3 
out 3IOCA 
mvl a,OU0iu00b 
out 310CA 

mv i %/10h 
out 3I0C3 
mv I a , 4 
out StOCB 
mvi it 01 000 1 00b 
" out 3 tOCO 
mvi a* 3 
out 3I0C3 
mvl 4,11000001b 
out StOCB 
. mv 1 4,3 _ 
out 3I0CB 
mvi 4,0UOl0Q0b 
out SIOCD 

rat 

and 



K and 0 to aaynch 



; Us clock, 1 atop bit 



;Rs anabla* 8 bits/char 



jT* anabla, 8 bits/char 



;l6a clock, 1 atop bit 



;ri« anabla. 8 bl t«/char 



;T« anabla, c bits/char 



fM 71 
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Oump Ot MAINl.BXB/H 



4D 5A B0 31 16 M 04 00 
00 01 00 51 0E 00 00 00 
74 00 55 02 79 00 55 02 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 0 0 00 00 
00 00 00 00 00 0 0 00 00 
00 00 00 00 0 0 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 0 0 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 0 0 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 0 0 00 00 
00 00 00 00 00 0 0 00 00 
00 00 00 00 00 0" 00 00 
00 00 00 00 00 00 00 00 
[04 00 00 0 0 00 00 00 00 
[0 00 00 00 00 00 00 00 
0a00 00 00 00 00 00 00 
;0f00 00 00 00 00 00 00 
IM00 00 00 00 00 00 00 
J#00 00 0O O0 00 00 00 

lE0r-W00 0* 00 00 00 00 00 
1P0: 00 00 00 00 00 00 00 00 
4C 61 74 74 6* 63 20 
55 02 8B D8 8E 00 26 8B 
P0 75 06 Bl 04 03 B3 EB 
IE 0B 00 B8 60 04 A3 10 
00 00 26 8A 0C 46 32 BO 
FP 2B E3 8B PC C6 05 63 
8A 04 88 05 46 47 E2 P7 
8B C4 50 E8 BD 00 8B B5 
E0 CB 55 8B EC E8 0B 00 
00 E8 3A 00 5D C3 55 8B 
8B E5 5D C3. 55 SB EC B8 
5D CI 55 8B EC B8 38 00 



3: 
10 1 
20: 
30: 
40: 
30: 
60: 
70: 
80: 
90: 
A0: 
B0: 
C0: 
D0: 
B0J 
F0: 
100: 
110t 
120: 
130: 
140: 
150* 
160: 

:^W 0 H 
^180>| 



; -100*1 



200: 
210: 
220: 
230: 
240: 
250: 
260: 
270: 
280: 
290: 
2A0: 
2B0: 
2C0: 
2D0: 
2E0: 
2F0: 
300: 
310: 
320: 
330: 



20 00 10 00 FP FF 02 
1C 00 00 00 10 00 00 00 
7E 00 55 02 ?0 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 0 0 00 00 
00 00 00 00 00 0 0 00 00 
00 00 00 00 00 0 0 00 00 
00 00 00 00 00 0 0 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 

00 00 00 00 00 O 0 00 00 
00 00 00 00 00 00 00 00 

00 00 00 00 00 0 0 00 00 
00 00 00 00 00 0 0 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 O 0 00 
00 00 00 00 OH 00 O 0 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 0 0 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 0 0 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
4V20 31 2B 10 32 PA B8 
1R 02 00 2B D8 P7 C3 00 
03 HB PH FF 8B E^ PB 89 
00 06 33 CO 50 8B RC BE 
8B D9 B3 C3 04 81 E3 FB 
47 E3 00 C6 05 20 47 26 
33 C0 88 05 BC 08 BR C0 
CB Al OB 00 20 04 00 8B 
E8 19 00 E« 24 00 E8 2P 
EC FP 36 24 00 E8 05 03 
26 00 50 E8 P7 02 8B R? 
50 E8 E9 02 8B E5 50 C3 



US IS IS ?S 1S'2S « re « 50 =3a. 

00 E8 4C 00 3C EA 75 28 
E8 3A 00 8A C4 E8 35 00 



37 83 C3 04 33 C9 8A 0F 
CO 4C FC 8B FB B0 01 E8 
E8 0A 00 E2 F9 59 E8 07 
E4 7B C3 55 83 EC 0C 8B 



E8 4C 

B0 03 R8 40 00 B8 E4 EC 

BR 72 00 8B 16 70 00 C4 

43 R8 06 00 4A 75 F0 C3 

13 00 51 B9 08 00 26 AC 



MZ • • • • < 



EC 



•»♦••••• 


*«*»••** 


•••••••• 


»•*»*••• 




»»«»•••• 




•**••»•• 


•••».#•• 


•••••••• 


..».*••• 
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C t.02.. 
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090: 
3 A3 1 
3B0: 
3C0: 
3D0: 
3E0t 
3F0i 
400: 
410: 
420: 
430: 
440: 
4501 
460: 
470: 
480: 
490: 
4A0: 
4B0: 
4C0: 
4D07 

4E0; 

4F0: 

500: 

510: 

520: 

530: 

540: 

550: 

560: 

570: 

580: 

590: 

5A0: 

5 BO: 

5C0: 

5D0: 

5E0: 

5F0: 

600: 

610: 

620: 

630: 

640: 

650: 

660: 

670: 

680: 

690: 

6A0: 



00^3|;C3|A3 02 
8B^6^'i0&^ 04 30 
F0; 8k^84|22 01 30 
10 00 7D|0B FF 46 
88 00 FP 46 10 EB 
AC 00 8B 76 10 46 
75 09 B8 EC 00 FF 
8B 76 10 8 A 04 30 
F0 8A 84 22 01 30 
10 00 70 0E FF 46 
99 00 FF 46 10 EB 
4D Al 82 00 FF 06 
84 AC 00, 8B 76 10 
2D 40 8B F8 8A 85 
46 10 EB DP' 30 3E 

03 E9 14 FF 3D 3D 
10 8A 04 30 E4 FF 
74 2A 8B 76 10 8A 
30 B4 25 08 00 74 

04 30 B4 85 C0 74 
B8 88 00 50 E8 CD 
53 89 46 06 R8 ED 
53 89 46 08 E8 AD 
B8 01 00 50 E8 65 



76 0A B8 F0 00 50 
13 04 8B E5 83 7E 
50 E8 B5 03 8B E5 

88 00 30 E4 85 CO- 
0D 04 00 88 44 06 
76 08 8A "44 06 30 
8A 44 06 30 R4 0D 
36 82 00 E8 EC FC 
83 C4 0C 50 C3 55 

89 46 0C 8B B6 12 
EC 00 8B OB 89 5E 
46 06 89 9R 12 01 
25 00 75 34 FF 86 
4B 85 DB 89 46 06 
FF 06 2E 02 88 04 
06 E8 20 04 8B B5 
8D 46 0B 50 FF B6 
46 0A 75 03 E9 7C 
8B 46 04 3B 46 08 
85 DB 89 IB 30 02 
8B F0 8A 42 OB 88 
0B 30 E4 BB 2E 02 
EB BE Al 30 02 48 
02 FF 06 2B 02 8B 
2R 02 50 FF 76 06 



01 30 
00 00 
8 A 04 
8B 76 
25 04 
FF 46 
EB CE 
B4 85 
B4 25 
04 8B 
C9 8B 
8A 04 
46 10 
E4 85 
E4 25 
04 8B 
C9 8B 
82 00 
8A 04 
22 01 
00 75 

00 75 
46 10 

04 30 

05 FF 
03 E9 

01 8B 
01 8B 
01 8B 

03 8B 

88 D0 
08 00 
B8 01 

- 75 0E 
A0 99 
E4 0D 

04 00 
8B E5 
81 EC 
01 8A 
00 43 
74 03 
12 01 

89 IE 
30 E4 
EB 90 
12 01 
FP C7 
7C 03 
78 13 
07 30 
53 50 
85 C0 
46 06 
E8 8B 



E4 25 
00 83 
30 E4 
10* 8A 

00 75 
10 8 A 
FP 46 
C0 89 
08 00 
P0 8B 
76 04 
30 E4 
A3 86 
C0 89 
08 00 
F0 8B 
76 04 

01 B0 
30 B4 
30 B4 
03 B9 
03 B9 
C6 04 
E4 40 
46 10 
7F FB 
E5 FF 
B5 BB 
E5 85 
E5 83 

03 8B 
75 15 
00 50 
8B 76 
00 30 

04 00 
88 44 
33 C« 
0B 01 
04 30 
8A 04 
E9 A7 
8A 07 
30 02 
EB A9 
8D 46 
E8 SB 
46 04 
E9 68 
8B IB 
B4 EB 
E8 B9 
A3 30 
88 04 
03 8B 



08 00 
3B 82 
B9 17 



04 30 
03 E9 
1C 30 
10 C7 
46 00 
75 IB 
7B 10 
C6 84 
3D 3B 

00 C7 
46 00 
75 IB 
7B 10 
C6 84 
8B F0 
85 C0 
25 08 
66 FF 

01 FB 
00 85 
8B F8 
EB E6 
EB 00 
36 86 
EC 00 
C0 89 
7B 06 
E5 B8 
FF 76 
E8 F8 
06 8A 
B4 85 
88 44 
06 Btf 
50 P.8 
8B KC 
B4 85 
30 B4 
00 8A 
30 K4 
78 0K 
B8 2E 
08 50 
05 8B 
00 00 
PF 83 
2E 02 
12 RB 
03 8B 
02 78 
30 E4 
E5 EO 



74 05>FF 46 fM^%i>* •* • 

00f 20 7c 03 ■ &mm&! i • 
01 FFi46 m^^^mm:r : ^ 

B4 40 8B F8: ^^•.^ ...0.S.. 

10 01 A1^24 V .U.....5 

FF 81 B3, 0F- - ' : ^>.^>;» 
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What is claimed is: 

1. A method of distributing software via an electronic 
communications network from a central facility with storage 
capacity for a library of available programs to a plurality of 
users 1 computers such that each distributed copy is usable only 
on specific user hardware, comprising the steps of 

responding to a specific user request for a specific 
software program by generating a unique index code and preparing 
a unique user copy by encrypting selected passages of said 
program in a manner such that a given algorithm operating on said 
encrypted passage and a key specified by said index code will 
yield the plaintext version of said passage, 

electronically transmitting said index code and said 
program with encrypted passages to the user, 

registering -the index code in an independent auxiliary 
device interconnected with the user's computer, 

storing the transmitted program with encrypted passages 
in the user's computer system on user selected media, 

when running the program with the encrypted passages on 
the user's computer, suspending normal execution at each 
encrypted passage and decrypting the encrypted passage by means 
of the auxiliary device by algorithmically combining the key 
specified by said index code with the encrypted passage and 
returning plaintext to said user's computer, and 

continuing normal execution until encountering another 
encrypted passage, 

whereby each user gets a different copy of the same 
program but no user ever has a complete plaintext version 
residing at any given time in the user's system memory so that 
each program copy is wedded to a specific user's auxiliary 
device. 

2. Hie method of claim 1, further comprising the step 

of 
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issuing differentiated independent auxiliary devices to 
said users having unique decryption master codes recorded at the 

central facility, 

before preparing software for delivery, identifying the 
user's independent auxiliary device and looking up its decryption 
roaster code, 

then preparing the unique copy by encrypting passages 
of the user selected program in a manner such that a given 
algorithm operating on (1) a key produced by a combination of the 
index code and the user's master code and (2) the encrypted 
passage will yield a plaintext version of the passage. 

3. The method of claim 1, further comprising 
automatically removing the index code from the. independent 
auxiliary device upon the occurrence of a predetermined . 
condition, 

whereby the user's copy of the program is automatically 
disabled, for example, after a predetermined time interval. 

4. The nethod of claim 2, wherein said issuing step 
includes factory loading each independent auxiliary device with a 
different decryption master code and recording each such master 
code at the central facility. 

5. The method of claim 2, wherein the issuing step 
includes selecting the decryption master codes at the central 
facility after distribution of the independent auxiliary devices 
to the users and electronically transmitting a unique master code 
to each of the independent auxiliary devices upon its initial 
request for software. 

6. The method of claim 5, wherein the step of 
electronically transmitting the decryption master code includes 
transmitting an encrypted version of the master code and 
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decrypting the master code before storing it in the independent 
auxiliary device. 

7. The rtethod of claim 1, wherein at least some of the 
encrypted passages of the program are software instructions 
themselves. 

8. The nethod of claim l f further comprising the step 
of scrambling the order of the modules in the user's copy before 
transmission to frustrate comparison with the original version of 
the program. 

9. A software protection processor for an end user 
computer comprising 

means for storing a unique package encryption key 

(PEK), 

means for receiving and storing a. registration index 
number (RIN) uniquely associated with a specific software program 
to be stored in the end user's computer system, 

logic iteans for modifying the PEK with the RIN to 
produce a specific decryption key, 

computer means responsive to the presentation of 
encrypted data by the user's computer for decrypting said data by 
algorithraically ccmbining it with the specific decryption key to 
produce a decrypted data output to said user's computer during 
program execution by the user's computer, 

whereby a unique copy of software chosen by the user 
can be prepared by a central facility by encrypting selected 
passages of the software in a manner such that they can be 
decrypted by the software protection processor by algorithmically 
ccmbining them with a decryption key produced by modifying the 
PEK with the RIN so that the user's copy will not run properly 
unless his computer is connected to a software protection 
processor with a correct PEK and RIN. 
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10. The apparatus of claim 9, further comprising 
means for disabling the software specific RIN upon the 

occurrence of a predetermined condition , 

whereby the selected software is disabled after, for 
example, a predetermined trial period or rental term, 

11. A data security apparatus for a user's computer 
having a ccmraunications link with a central computing facility, 
comprising 

an independent auxiliary device electronically separate 
from but connected to the user's computer including 
means for storing a unique first code, 
means for receiving via said communications link a 
second unique code, 

means for rodifying said first code with said 

second code to produce a third code, 

means responsive to the presentation of encrypted 
data for decrypting said data by algorithmically combining it 
with said third code, 

whereby data presented over the conmunications link as 
an encrypted password, for example, or by the user's computer can 
be decrypted for verification. 

12. The apparatus of claim 11, further comprising 
means for disabling said second code after a 

predetermined usage interval. 

13. A software distribution system for distributing 
software fran a central facility to a plurality of users' 
computers such that each distributed copy is usable only with a 
specific user's auxiliary device, comprising the steps of 

generating a unique index code, 

preparing a unique user copy of a selected software 
program by encrypting selected passages of said program in a 
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manner such that a given algorithm operating on said encrypted 
passage and a key specified by said index code will yield the 
plain text version of said passage, 

providing an auxiliary device in which said index code 
can be registered, designed to be interconnected with the user's 
computer, such that when running the program with the encrypted 
passages, normal execution is suspended at each encrypted passage 
and the encrypted passage is decrypted by the auxiliary device by 
algorithmically combining the key specified by said index code 
with the encrypted passage and returning plain text to said 
user's computer such that there is never a complete plain text 
version of the software program resident in the user's system 
memory, 

whereby each user receives a different copy of the same 
software program which will only run with his specific auxiliary 
device. 

14. The method of claim 13, wherein said step of 
providing auxiliary devices includes issuing differentiated 
auxiliary devices to said users having unique decryption master 
codes recorded at the central facility, 

before preparing software for delivery, identifying the 
user's auxiliary device and looking up its decryption master 
code, 

then preparing the unique copy by encrypting the 
passages of a selected program in a manner such that a given 
algorithm operating on (1) a key produced by a combination of the 
index code and the user's master code and (2) the encrypted 
passage will yield a plain text version of the passage. 

15. The method of claim 13, further cctnprising 
automatically disabling the index code in the auxiliary device 
upon the occurrence of a predetermined condition, 

whereby the user's copy of the program is automatically 
disabled, for example, after a predetermined time interval. 
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16. The method of claim 13, wherein at least seme of 
the encrypted passages of the program are software instructions 
themselves. 

17. The nethod of claim 13, further comprising the 
step of scrambling the order of the modules in the user's copy 
frustrate comparison with another version of the program. 
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